Lucene search
+L

5365 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•15 views

Malicious code in truffle-plugin-blockscout-verify-jordin (npm)

The package truffle-plugin-blockscout-verify-jordin was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•15 views

MAL-2025-37234 Malicious code in truffle-plugin-blockscout-verify-jordin (npm)

The package truffle-plugin-blockscout-verify-jordin was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•17 views

MAL-2025-37903 Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm)

The package updated-tricks-roblox-robux-generator-2023-get-verifywrhzdu was found to contain malicious code...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/14 4:10 p.m.•49 views

Security Bulletin: A Security Vulnerability was found in the IBM Security Verify Access product.

Summary IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password Vulnerability Details CVEID:CVE-2024-45647 DESCRIPTION: IBM Security Verify Access could allow could an unverified user to change the password...

9.8CVSS5.9AI score0.00269EPSS
SaveExploits0Affected Software1
Redos
Redos
•added 2025/08/13 12:00 a.m.•16 views

ROS-20250813-06

A vulnerability in a software wrapper that allows arbitrary traffic to be hidden in an encrypted ssl tunnel Stunnel is related to incorrect client certificate validation when using the parameters redirection and VerifyChain parameters. Exploitation of the vulnerability could allow an attacker...

7.5CVSS7.3AI score0.01179EPSS
SaveExploits0
Malwarebytes
Malwarebytes
•added 2025/08/12 1:00 p.m.•23 views

That “Amazon Safety Recall” message may well be a scam

Scammers are using the age old tactic of scaring victims into clicking by sending out fake product recall messages from Amazon. The text message tells you that the item does not meet Amazon’s standards, and tries to install some urgency by claiming it is not safe to use. It also includes a link...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•9 views

PT-2025-46604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s sunrpc implementation where a null pointer dereference can occur during checksum processing. Specifically, in the xdr stream decode opaque auth...

7.5CVSS7.5AI score0.00528EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2019-11727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only one...

5.3CVSS6.8AI score0.01812EPSS
SaveExploits0References2
Gitee
Gitee
•added 2025/08/09 11:20 p.m.•101 views

Pocsuite

This project is an open-sourced remote vulnerability testing and proof-of-concept development framework called Pocsuite, developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine and many niche features for penetration testers and security researchers. The framework...

6.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/08 5:17 p.m.•29 views

Security Bulletin: Multiple security vulnerabilities discovered in RedHat UBI as shipped with IBM Security Verify Directory Server Container

Summary Multiple security vulnerabilities have been addressed in the RedHat UBI container that is shipped with the IBM Security Verify Directory Server Container. Vulnerability Details CVEID:CVE-2024-12718 DESCRIPTION: Allows modifying some file metadata e.g. last modified with filter="data" or...

9.4CVSS8.8AI score0.71394EPSS
SaveExploits18Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2018-10322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service...

5.5CVSS6.4AI score0.00481EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/08/08 12:00 a.m.•22 views

The vulnerability of the mbedtls_lms_verify() function in Mbed TLS software allows a hacker to bypass existing security restrictions.

The vulnerability of the mbedtlslmsverify function in Mbed TLS is related to the absence of a necessary encryption step. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

4.9CVSS5.5AI score0.00158EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2025/08/07 7:00 a.m.•21 views

ASoC: Intel: avs: Verify content returned by parse_int_array()

...

5.5CVSS7AI score0.00176EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/08/06 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-1879)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.5AI score0.07723EPSS
SaveExploits4References2
Hacker One
Hacker One
•added 2025/08/05 4:15 p.m.•27 views

HackerOne: DOS via Mutation Aliasing in GraphQL Account Recovery Phone Number Verification API

The GraphQL API's 'verifyAccountRecoveryPhoneNumber' mutation was found to be vulnerable to denial-of-service attacks through mutation aliasing. The vulnerability allowed multiple aliases of the same mutation to be included in a single request, causing the server to process each mutation...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•21 views

PT-2025-33749

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A flaw exists in the Linksys E5600 due to a risky cryptographic algorithm within the verify gemtek header function of the checkFw.sh file in the Firmware Handler component. The attack can be launche...

8.1CVSS7AI score0.00526EPSS
SaveExploits1References10
OSV
OSV
•added 2025/08/01 2:44 p.m.•10 views

SUSE-SU-2025:02592-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 2.5.3 jscSLE-23879: - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego bsc1246725 Changelog: Update to 2.5.3: - Add signing-config create command 4280 - Allow multiple services to be specified for trusted-ro...

7.4CVSS5.8AI score0.00532EPSS
SaveExploits0References3
OSV
OSV
•added 2025/07/28 12:15 p.m.•7 views

DEBIAN-CVE-2025-38496

In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/28 12:15 p.m.•17 views

UBUNTU-CVE-2025-38496

In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References29
attackerkb
attackerkb
•added 2025/07/28 11:22 a.m.•15 views

CVE-2025-38496

In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...

5.5CVSS6.1AI score0.00148EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder